Senior Cybersecurity Operations & Intelligence Analyst

ECS

Arlington (VA)

Hybrid

USD 175,000 - 195,000

Full time

20 hours ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Everforth ECS in Arlington, VA is seeking a Senior Cybersecurity Operations & Intelligence Analyst to join a hybrid team supporting CISA’s TESS program. You will analyze threats, manage vulnerabilities, and provide actionable reporting across federal cybersecurity operations.

You will develop dashboards, mentor analysts, and translate complex data into clear recommendations for technical and non-technical audiences, leveraging MITRE ATT&CK and a range of security tools.

Qualifications

10+ years in cybersecurity or related technical discipline.
Experience in federal government or DoD environments.
Experience across threat intelligence, vulnerability management, defensive operations, network defense, or security operations.
Able to communicate findings to technical and non-technical stakeholders.
Experience developing reports, dashboards, or analytics.
Familiarity with MITRE ATT&CK.
Experience creating SOPs/workflows.
Collaborative across technical teams and customers.

Responsibilities

Support cyber threat intelligence, vulnerability management, network defense, and defensive cyber operations.
Analyze threats and vulnerabilities to identify risks and investigation needs.
Develop actionable threat and vulnerability reporting for teams and stakeholders.
Enrich data using internal, commercial, and government sources.
Develop dashboards, metrics, and recurring cybersecurity reports.
Support network defense and security incident analysis.
Apply MITRE ATT&CK to analysis and reporting.
Maintain SOPs, workflows, and knowledge resources.
Identify automation opportunities for data enrichment and reporting.
Collaborate with technical teams and government stakeholders.

Skills

Cyber Threat Intelligence

Vulnerability Management

Defensive Cyber Operations

Network Defense

Security Operations

Communication to Stakeholders

Threat Reporting & Analytics

Mentorship & Guidance

MITRE ATT&CK Knowledge

Data-driven Decision Making

Education

Bachelor's degree in Cybersecurity/IT/CS

Security+ or equivalent certification

CEH/Network+/ITIL or Project+ preferred

Tools

Mandiant Advantage

Palo Alto Xpanse

ILI

XSOAR

XSIAM/XDR

Censys

Elastic

ServiceNow

Jira

Confluence

Tableau

Microsoft Excel

Job description

Job Description

Everforth ECS is seeking a Senior Cybersecurity Operations & Intelligence Analyst to join our team in Arlington, VA (Hybrid).

ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division/Joint Cyber Defense Collaborative. This is a hybrid role.

We are seeking a Senior Cybersecurity Operations & Intelligence Analyst to support federal cybersecurity programs through cyber threat analysis, vulnerability management, defensive cyber operations, operational reporting, and continuous process improvement.

This position will work across cybersecurity operations and intelligence functions to analyze threat and vulnerability information, improve operational visibility, develop actionable reporting, enhance cybersecurity workflows, and provide technical guidance to analysts and customer stakeholders.

Key Responsibilities

Support cybersecurity operations across cyber threat intelligence, vulnerability management, network defense, and defensive cyber operations.
Analyze cybersecurity and vulnerability information to identify threats, trends, operational risks, and areas requiring additional investigation.
Develop actionable threat and vulnerability reporting for cybersecurity teams, program leadership, and federal stakeholders.
Enrich technical cybersecurity data using internal, commercial, and government data sources.
Develop and improve operational dashboards, metrics, analytic tools, and recurring cybersecurity reporting.
Support network defense and security incident analysis, including analysis of network and security-event data.
Apply frameworks such as MITRE ATT&CK to defensive cyber analysis and reporting.
Develop and maintain SOPs, workflows, knowledge-management resources, and cybersecurity operational processes.
Identify opportunities to automate data enrichment, reporting, and other recurring cybersecurity activities.
Evaluate operational gaps and recommend improvements to cyber tools, processes, and workflows.
Collaborate with technical teams, vulnerability management personnel, cybersecurity analysts, and government stakeholders.
Provide technical mentorship and knowledge sharing to cybersecurity personnel.
Translate complex technical information into clear, actionable recommendations for technical and non-technical audiences.

Salary Range: $175,000 - $195,000

Required Skills

10+ years of experience in cybersecurity, information security, cyber operations, network defense, or a related technical discipline.
Experience supporting cybersecurity operations in federal government or DoD environments.
Experience in one or more of the following areas:
- Cyber Threat Intelligence
- Vulnerability Management
- Defensive Cyber Operations
- Network Defense
- Security Operations
Experience analyzing cybersecurity information and communicating findings to technical and non-technical stakeholders.
Experience developing cybersecurity reports, metrics, dashboards, or other analytic products.
Knowledge of cybersecurity frameworks such as MITRE ATT&CK.
Experience developing SOPs, workflows, or operational processes.
Demonstrated ability to work across technical teams and customer organizations.
Strong written and verbal communication skills.

Desired Skills

Experience with Mandiant Advantage, Palo Alto Xpanse, ILI, XSOAR, XSIAM/XDR, Censys, or similar cybersecurity platforms.
Experience with Elastic, ServiceNow, Jira, Confluence, Tableau, and Microsoft Excel.
Experience with network traffic or packet analysis.
Experience supporting a Cybersecurity Service Provider (CSSP), Security Operations Center, or Defensive Cyber Operations environment.
Knowledge of cloud security concepts and environments, including AWS, Azure, or Microsoft 365.
Experience developing automated reporting or data-enrichment processes.
Experience mentoring or providing technical guidance to cybersecurity analysts.

Education & Certifications

Associate's or bachelor's degree in Cybersecurity, Information Technology, Computer Science, Network Management, or a related field, or an equivalent combination of education, certifications, training, and professional experience.
Security+ or equivalent cybersecurity certification preferred.
Additional relevant certifications such as CEH, Network+, ITIL, or Project+ preferred.

Security Clearance

Active Top Secret/SCI clearance preferred or required based on customer requirements.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value